Service 03

End-to-end encryption development — our protocol, our app, or built into yours.

ICEBERG is our layered encryption protocol: multiple algorithms, a different ciphertext for every message, and no secret key ever shared over the network. Privyie is the authenticator we built on it. Both are available inside your product.

Protocol
ICEBERG — layered encryption protocol
Product
Privyie — 2FA & secret notes, Android / iOS
Modes
Server-relayed · direct end-to-end
Platforms
Cross-platform SDK integration
ICEBERG · layered encryption protocol

The same message, never the same ciphertext.

ICEBERG applies several encryption algorithms, each with its own key, to a single message block. A shuffling technique and random algorithm selection produce a ciphertext that differs every time, and the recipient recognises how to decrypt it without any secret key being exchanged.

  • Asymmetric handshake, then symmetric encryption per message
  • Every message uses a different algorithm and seed
  • No symmetric secret key is ever sent over the network
  • Server-relayed mode (the server re-encrypts for the recipient) or direct end-to-end mode
  • Platform and architecture independent

Technical white paper available on request.

SENDER encrypts (ICEBERG) SERVER decrypts · re-encrypts RECIPIENT decrypts locally CT 1 CT 2 RELAYED MODE · CT 1 ≠ CT 2 DIRECT MODE · SAME CIPHERTEXT END TO END PER-SESSION NODE BLOCKS Crypto Algo Node · Crypto Seed Node · Crypto Index Node Created on each side · never transmitted
Privyie · secure cloud-based authenticator

Two-factor codes and secret notes, encrypted on the fly.

Privyie stores your authentication accounts and secret notes on secured cloud servers and retrieves them when you ask — every piece encrypted with ICEBERG, with keys created at random and destroyed after use. Nothing sits on the phone; nothing sits unencrypted on the server.

2FA & notes

OTP accounts like any authenticator, importable and exportable, plus encrypted notes for sensitive text.

Encrypted cloud

No backup needed — your account is tied to your phone number and restored on a new device.

Private PINs

Any account or note can carry its own 6-digit PIN; even headers stay hidden until it is entered.

Single device

One account, one device at a time. Android and iOS.

Store links — added on release
PRIVYIE Authenticator 482 913 expires in 18 s Exchange · mainPIN Secret note · Recovery keys
In your product

Where we put encryption to work.

Messaging & chat

Message content stays encrypted through your servers and queues. Relayed mode keeps server-side features — routing, moderation hooks — without exposing plaintext to the network.

Files & documents

Encrypted upload, storage and download of documents, statements and KYC files, with per-item keys and access that expires.

Sensitive data at rest

Field-level encryption for records your database should never hold in the clear — identity numbers, account details, credentials — with rotation that does not need downtime.

Authentication & OTP

Second-factor, device binding and OTP flows built the way Privyie does it, embedded in your own app.

Payment & trading channels

Encrypted channels between terminals, gateways and back offices — the trading and payment systems we build ship with this by default.

Application security review

A review of how your existing system handles, stores and moves data, with a written report and a prioritised fix plan.

Questions

Asked before every project.

Is ICEBERG a new cipher?

No. ICEBERG is a protocol layered over established asymmetric and symmetric algorithms. What it adds is how they are combined and rotated per message, and the fact that no symmetric secret key is ever transmitted.

Can we see the technical details?

The white paper is available on request, and a protocol walkthrough is part of every security engagement. Deeper material is shared under NDA.

Does it work if we already have TLS?

Yes. TLS protects the connection; ICEBERG protects the message, so the content stays encrypted through servers, queues and storage that TLS cannot cover.

Is Privyie available today?

Privyie runs on Android and iOS. Store links are published on this page as each release goes live.

Which platforms can integrate ICEBERG?

The protocol is platform-independent. Current integrations are in C#/.NET, mobile (Android and iOS) and web clients; other runtimes are added per project.

Do you do security reviews of existing systems?

Yes — application-level reviews of how data is handled, stored and transmitted, with a written report and a fix plan. We do not sell penetration testing as a standalone service.

Have data that must stay private in transit and at rest?

Tell us what moves, between whom, and through what. We will show you where ICEBERG fits.

Start the conversation